The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Traffic from client to Malware DNS Trap IP address is not prevented
Platform / Model
Traffic from the client to the bogus IP address is handled according to the Access Control policy, but not logged as "Prevented."
DNS traffic resolving malware domains is detected and the response was replaced by the Malware DNS Trap IP and the notification in the log entry: "DNS response was replaced with a DNS trap bogus IP. See sk74060 for more information."
Client is not classified as "Infected Host" in reports.